Uber 'covered up' hack that exposed data of 57 million global users, drivers

Uber Technologies Inc failed to disclose a massive breach last year that exposed the data of some 57 million users of the ride-sharing service, the company's new chief executive officer said on Tuesday.

Discovery of the company's handling of the incident led to the departure of two employees who led Uber's response to the incident, said Dara Khosrowshahi, who was named CEO in August following the departure of founder Travis Kalanick.

Uber's chief security officer and another employee were let go for taking steps to cover up the hack, including paying hackers $100,000, Bloomberg reported.

Khosrowshahi said he had only recently learned of the matter himself.

Yahoo7 has contacted Uber Australia for comment about whether local accounts were compromised during the hack.

The company's admission that it failed to disclose the breach comes as Uber is seeking to recover from a series of crises that culminated in the Kalanick's ouster in June.

Uber says there was a hack affecting over 55 million accounts. Source: AAP.

According to the company's account, two individuals downloaded data from a third-party cloud server used by Uber, which contained names, email addresses and mobile phone numbers of some 57 million Uber users around the world.

The individuals also downloaded names and driver’s license numbers of some 600,000 of the company's US drivers, Khosrowshahi said in a blog post.

He said he had hired Matt Olsen, former general counsel of the US National Security Agency, to help him figure out how to best guide and structure the company's security teams and processes.


"None of this should have happened, and I will not make excuses for it," Khosrowshahi said in the blog post.

"While I can’t erase the past, I can commit on behalf of every Uber employee that we will learn from our mistakes.

"We are changing the way we do business, putting integrity at the core of every decision we make and working hard to earn the trust of our customers."